CVE-2025-15193: Buffer Overflow in D-Link DWR-M920
A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. This affects the function sub_423848 of the file /boafrm/formParentControl. Performing manipulation of the argument submit-url results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.
CVE-2025-15193: Buffer Overflow in D-Link DWR-M920
Description
A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. This affects the function sub_423848 of the file /boafrm/formParentControl. Performing manipulation of the argument submit-url results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2025-12-28T09:10:14.904Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 69529b3171a94549f1430323
Added to database: 12/29/2025, 3:16:01 PM
Last updated: 12/29/2025, 7:03:06 PM
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Related Threats
CVE-2025-68706: n/a
UnknownCVE-2025-15200: Cross Site Scripting in SohuTV CacheCloud
MediumCVE-2025-14280: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor in pixelyoursite PixelYourSite – Your smart PIXEL (TAG) & API Manager
MediumCVE-2025-13592: CWE-94 Improper Control of Generation of Code ('Code Injection') in monetizemore Advanced Ads – Ad Manager & AdSense
HighCVE-2025-67255: n/a
UnknownActions
Need more coverage?
Upgrade to Pro Console in Console -> Billing for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.